Extended Module Player (xmp) 'oxm.c' And 'dtt_load.c' Multiple Local Buffer Overflow Vulnerabilities

Bugtraq ID:	27047
Class:	Boundary Condition Error
CVE:	CVE-2007-6731 CVE-2007-6732
Remote:	No
Local:	Yes
Published:	Dec 27 2007 12:00AM
Updated:	Apr 13 2015 08:15PM
Credit:	Luigi Auriemma discovered these issues.
Vulnerable:	Extended Module Player xmp 2.5.1
Not Vulnerable:

Extended Module Player (xmp) 'oxm.c' And 'dtt_load.c' Multiple Local Buffer Overflow Vulnerabilities

Extended Module Player (xmp) is prone to multiple local buffer-overflow vulnerabilities because it fails to perform adequate boundary checks before copying user-supplied input into an insufficiently sized buffer.

These issues occur when the application handles specially crafted OXM and DTT files.

Attackers can exploit these issues to execute arbitrary code that could compromise the affected computer. Failed attacks will likely cause denial-of-service conditions.

Extended Media Player 2.5.1 is vulnerable; other versions may also be affected.

Extended Module Player (xmp) 'oxm.c' And 'dtt_load.c' Multiple Local Buffer Overflow Vulnerabilities

The following proof-of-concept code is available:

• /data/vulnerabilities/exploits/27047.c

Extended Module Player (xmp) 'oxm.c' And 'dtt_load.c' Multiple Local Buffer Overflow Vulnerabilities

References:

• Vendor Homepage (Extended Module Player)
  
• Buffer-overflow in Extended Module Player 2.5.1 (Luigi Auriemma )